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DETAILED ACTION 

1 . Claims 1 -28 are pending. 

Claim Rejections - 35 USC § 112 

The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the 
subject matter which the applicant regards as his invention. 

2. Claims 1-4, 6-10, 12-14, 18, 21 and 24-26 rejected under 35 U.S.C. 1 12, second 
paragraph, as being indefinite for failing to particularly point out and distinctly claim the subject 
matter which applicant regards as the invention. 

With regard to claims 1-4 and 6-9 it is unclear what the scope of the claims entail since 
claim 2 does not seem to further limit independent claim 1 unless using a key to encrypt 
something is not encrypting something with a key. Otherwise, claims 3, 4 and 6-9 conflict with 
the independent claim. If using a public key to encrypt a public key implies that the public key 
was encrypted with the other public key in a public key/private key algorithm, then claim 3 
conflicts with claim 1 since now the same two keys are not encrypting each other, a symmetric 
key is being used to encrypt a public key and then a public key is being used to encrypt the 
symmetric key. If this is the case then claim 4 contradicts claim 3 since you don't need the 
symmetric key in order to decrypt the public key in encrypted. And if in independent claim 1, 
the message is encrypted using a public key then encrypting the same message in claim 6 
contradicts claim 1 . 

The terms "more-sensitive and less-sensitive" in claims 10, 13, 19 and 21 is a relative 
term which renders the claim indefinite. The terms "more-sensitive and less-sensitive" are not 
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defined by the claim, the specification does not provide a standard for ascertaining the requisite 
degree, and one of ordinary skill in the art would not be reasonably apprised of the scope of the 
invention. 

Claim 1 8 recites the limitation "the inner layer of the message" in lines 4-5. There is 
insufficient antecedent basis for this limitation in the claim. 

With regard to claims 24-26, again it is unclear whether, since the public key QG is 
already encrypted with symmetric key S in claim 21, it seems that claim 24 conflicts with claim 
21. It is unclear whether public key QG is encrypted with S' before or after S or if it is another 
embodiment entirely. If it is another embodiment entirely then it would appear that it is the same 
as encrypting public key QG with S just with S' and since S and S' could be equal it is unclear. 

Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

3. Claims 1, 2 5 4 ? 5, 6-9, 13, 16, 18, 21-23, 24-28 rejected under 35 U.S.C. 103(a) as being 

unpatentable over Slick et al. (Slick), U.S. Patent No. 7,003,667 in view of Boneh et al. (Boneh), 

U.S. Patent No. 7,113,594. 

As per claims 1 and 2: 

Slick substantially teaches a method comprising: 
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at the sender, encrypting the message using at least two layers of encryption by using an 
inner layer of message encryption having an associated inner-layer public key to encrypt the 
message data and by using an outer layer of message encryption having an associated outer-layer 
public key to encrypt the inner-layer public key without using a symmetric key; sending the 
encrypted message to the recipient; and at the recipient, decrypting the encrypted message using 
an outer-layer private key corresponding to the outer-layer public key and using an inner-layer 
private key corresponding to the inner layer public key (9:27-10:45, 1 1 :20-28, 1 1 :42-64 wherein 
it would have been obvious to combine the one embodiment of Slick that uses a public key to 
encrypt the public key that encrypts the symmetric key with the embodiment that encrypts the 
message using the public key and then encrypting the public key encrypted message again 
utilizing the first embodiment as suggested by Slick (1 1 :64-67). Since encrypting the message 
twice with a public key utilizes a lot of system resources, encrypting only the key saves 
resources while ensuring security (1 1:67-12:7). 

As per claim 4: 

Slick substantially teaches a method further comprising: 

sending the encrypted message to the recipient comprises sending the encrypted inner- 
layer public key to the recipient with the encrypted message, and wherein decrypting the 
encrypted message at the recipient further comprises using the outer-layer private key to decrypt 
the encrypted inner-layer public key to produce an unencrypted version of the inner-layer public 
key at the recipient (1 :39-58). 

As per claim 5: ' 
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Slick further teaches a method wherein encrypting the message comprises encrypting the 
message using at least three layers of encryption and wherein the outer layer is not an outermost 
layer (10:46-1 1 :28 wherein three keys equals three layers but the third is not the outermost layer 
since a signed hash can also be appended). 

As per claims 6-8, 21-23 and 24-26: 

Slick teaches a method comprising: 

encrypting the message by performing at least an inner layer of encryption and an outer 
layer of encryption at the sender, wherein: performing the inner layer of encryption includes 
encrypting the message data M using a symmetric key S to produce encrypted message data Ms 
and encrypting the symmetric key S using an public key QG associated with the inner layer of 
encryption to produce an encrypted symmetric message key SQG, and performing the outer layer 
of encryption includes encrypting at least the public key QG using an public key QL, wherein the 
public key QL is less sensitive than the public key QG; and sending at least the encrypted 
message data Ms, the encrypted symmetric message key SQG, the public key QL, the encrypted 
key QGQL and the encrypted public key QG to the recipient (9:27-10:45, 1 1:4-28). 

As per claim 9: 

Slick teaches a method further comprising: 

using the outer-layer private key to decrypt the inner-layer public key that has been 
encrypted using the outer-layer public key; using inner-layer private key to decrypt the 
symmetric key that has been encrypted using the inner-layer public key; and using the symmetric 
key that has been decrypted using the inner-layer private key to decrypt the message data that 
was encrypted using the symmetric key (12:7-51). 
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As per claim 13: 

Slick further teaches a method wherein at least one of the data attributes has an associated 
sensitivity level and wherein encrypting the message data comprises using the sensitivity level in 
determining how to encrypt the message (1 : 14-22}. 

As per claims 15 and 16: 

Boneh further teaches a method wherein encrypting an email message comprises utilizing 
an age based policy (29:55-63). 
As per claims 27 and 28: 

Boneh further teaches a public key based on a recipient's email address (2:45-62). 

Slick fails to disclose the key and encryption being IBE 5 however, Boneh discloses 
utilizing IBE as an asymmetric encryption scheme (abstract). It would have been obvious to one 
of ordinary skill in the art at the time of applicant's invention to make the keys be identity based 
as suggested by Slick, in order to ensure the intended recipients receive the printout or fax, 
having keys based on their identity would ensure that only they could read it and only printers or 
fax machines associated with them could decrypt the information (Slick, 1:14-58). 
4. Claims 10, 1 1 and 18-20 rejected under 35 U.S.C. 103(a) as being unpatentable over 
Slick in view of Boneh as applied to claim 1 above, and further in view of Van Oorschot et al. 
(Van Oorschot), U.S. Patent No. 5,850,443. 

As per claims 10 and 18-20: 

Slick and Boneh fail to disclose varying sensitivity levels of the multiple encryption keys 
and the keys having overlapping components. However, Van Oorschot discloses a method 
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wherein varying strengths of multiple encryption keys are used, and the keys are concatenated 
together, therefore each key shares the same components with all the others (4:16-56). 

It would have been obvious to utilize varying encryption key strengths along with 
overlapping components because it allows multiple parties to communicate over varying trust 
environments and to share cryptographic keys (Van Oorschot, 1 :66-2: 1 3). 

As per claim 11: 

Slick further teaches a method wherein encrypting the message comprises encrypting the 
message using at least three layers of encryption and wherein the outer layer is not an outermost 
layer (10:46-1 1 :28 wherein three keys equals three layers but the third is not the outermost layer 
since a signed hash can also be appended). 

5. Claim 17 rejected under 35 U.S.C. 103(a) as being unpatentable over Slick in view of 
Boneh as applied to claim 1 above, and further in view of Lord et al. (Lord), U.S. Patent No. 
7,131,003. 

With regard to claim 17, Slick and Boneh fail to teach the encrypted message comprising 
an instant message. However, Lord discloses a method of encrypting instant messages (2:35-49). 
It would have been obvious to one of ordinary skill in the art at the time of applicant's invention 
to increase the security of instant messages as suggested by Lord (1 :41-62). 

Allowable Subject Matter 

6. Claim 3 objected to as being dependent upon a rejected base claim, but would be 
allowable if rewritten in independent form including all of the limitations of the base claim and 
any intervening claims. 
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Conclusion 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Kristin D. Sandoval whose telephone number is 571-272-7958. 
The examiner can normally be reached on Monday - Friday, 8:00-5:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 




Kristin D Sandoval 

Examiner 

Art Unit 2132 
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SUPERVIS0RY PATENT EXAMINER 
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